Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/Evsw6qqdXEDcaGcQrCbHkL2YFg4.roa
File: Evsw6qqdXEDcaGcQrCbHkL2YFg4.roa (raw, json)
Hash identifier: Q4LYlKWnORa2iA9O5IiC9EahEcLd7CjeOMURyvY/RxA=
Subject key identifier: 12:FB:30:EA:AA:9D:5C:40:DC:68:67:10:AC:26:C7:90:BD:98:16:0E
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 018B42F4450FF53D817E0A54B0A825F8500E
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/Evsw6qqdXEDcaGcQrCbHkL2YFg4.roa
Signing time: Wed 18 Oct 2023 13:23:06 +0000
ROA not before: Wed 18 Oct 2023 13:23:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199785
IP address blocks: 89.107.10.0/24 maxlen: 24
178.250.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Dec 2023 10:42:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:f4:45:0f:f5:3d:81:7e:0a:54:b0:a8:25:f8:50:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Oct 18 13:23:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12fb30eaaa9d5c40dc686710ac26c790bd98160e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ed:36:aa:8c:59:71:3e:11:45:79:c5:7a:48:
9a:07:ae:2b:01:f7:25:1f:68:97:69:59:c0:20:86:
86:1e:38:d9:6b:5c:2a:34:fd:7f:f0:ab:77:58:71:
f9:e8:da:01:69:1d:fa:f6:f0:41:9a:36:a5:67:12:
e1:dd:6c:aa:ee:21:35:d1:b6:2f:4f:04:4c:c5:b9:
1a:8f:ec:2a:e1:fb:d3:7b:90:aa:aa:77:2f:e0:cb:
bd:ff:66:97:5b:51:23:bf:66:a5:d5:8c:47:cc:12:
fa:2d:5e:0d:98:79:73:9e:b0:c3:9c:f9:47:4e:64:
47:b9:ae:26:36:b5:7f:9e:cc:e6:10:58:49:f5:5f:
8a:c1:b3:5d:5f:f4:ea:cc:ea:5e:34:cf:c2:2b:d8:
28:79:8a:bc:aa:f1:9a:42:32:76:ce:49:28:8f:4c:
4e:1a:95:5f:83:2c:98:c3:1e:4c:a3:03:83:05:cf:
a9:c5:95:33:89:76:6f:ef:a8:f7:f7:9d:57:ea:bd:
0d:3a:36:f7:1c:a9:ea:c1:4b:ba:99:61:fc:32:53:
dd:cb:ef:4c:65:01:64:30:8e:6c:23:ec:2f:a7:34:
d9:ec:af:25:84:c6:d2:15:a7:32:e2:1f:06:f6:1f:
2e:18:dd:3d:af:68:d9:1d:22:da:b8:36:cd:82:c2:
53:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FB:30:EA:AA:9D:5C:40:DC:68:67:10:AC:26:C7:90:BD:98:16:0E
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/Evsw6qqdXEDcaGcQrCbHkL2YFg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.10.0/24
178.250.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:29:0f:ba:f5:cc:10:b0:a6:d8:23:a8:26:84:5f:b9:f0:bb:
84:ce:14:cc:1c:c2:bb:4f:a9:86:5d:16:7c:fa:ed:d5:ca:14:
d4:31:e9:78:14:7b:54:45:fe:f6:d0:85:75:98:16:44:90:e2:
95:1a:c7:fd:12:e7:59:a8:e3:19:1c:ab:26:3c:af:75:41:10:
ba:8a:81:54:77:a3:ac:ef:4e:ec:33:28:ba:63:68:71:56:9f:
90:87:01:6b:b7:af:d9:0c:56:4c:df:3c:e9:48:3f:ab:c6:a2:
19:ba:be:44:2e:c1:e8:f3:a2:c1:32:ab:dc:11:13:49:23:6c:
90:8c:e5:7c:f9:3f:60:64:53:f7:50:38:c8:74:3e:6d:eb:8c:
d3:c4:f9:54:c4:dc:cc:28:2f:03:34:f8:b9:09:74:54:d2:ba:
7b:3f:0b:b0:4a:5c:21:68:32:18:bc:a3:63:ab:fc:b2:ec:5b:
71:95:1e:7c:50:16:2c:51:35:df:b6:b3:13:e2:af:c4:c2:8b:
38:df:f5:5a:9d:b9:76:2a:04:6f:9d:ba:b8:b6:66:a2:9c:7b:
c8:77:af:61:7e:e8:22:c7:b4:6c:a9:fe:f4:2c:89:df:72:03:
58:c5:5f:95:b5:81:01:6a:f1:44:65:5e:5d:8f:c8:9d:01:61:
3d:54:fd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:53 2024 by rpki-client on console-ams.rpki-client.org